P.U. (A) 335 PART II PERSONAL DATA PROTECTION PRINCIPLES General Principle Consent of data subject 3. (1) A data user shall obtain consent from a data subject in relation to the processing of personal data in any form that such consent can be recorded and maintained properly by the data user. (2) If the form in which such consent in subregulation (1) is to be given also concerns another matter, the requirement to obtain consent shall be presented distinguishable in its appearance from such other matter. (3) A data user shall obtain consent referred to in subregulation (1) from the parent, guardian or person who has parental responsibility on the data subject, if the data subject is under the age of eighteen years. (4) A data user shall obtain consent the consent referred to in subregulation (1) from a person who is appointed by a court to manage the affairs of the data subject or a person authorized in writing by the data subject to act on his behalf if the data subject is incapable of managing his own affairs. (5) The burden of proof for such consent referred to in subregulation (1) shall lie on the data user. Notice and Choice Principle Details of data user 4. For the purposes of paragraph 7(1)(d) of the Act, the data user shall at least provide the data subject the details as follows: (a) designation of the contact person; 14

Sélectionner le paragraphe cible3